“SCA tools” jobs in Canada – Page 3

No matching filters. Try another name.

Results

• 28d

  Airframe Mechanic

  Halifax, NS

  IM

  I M P Group International Inc.

  4+ YOECandidates need at least 4 years of aircraft maintenance experience at an AMO or MRO, plus a recognized aircraft maintenance or apprenticeship credential or a TCCA AME licence. They must read technical manuals and drawings, understand airworthiness requirements, and be eligible for Secret clearance and the Controlled Goods Program.

  hand tools, power tools, support equipment

  28d

  Avionics Technician

  Halifax, NS

  IM

  I M P Group International Inc.

  Candidates need an aircraft maintenance credential such as an AME licence, an avionics qualification, or a military or apprenticeship equivalent. They also need knowledge of aircraft avionics and wiring, and must be eligible for Controlled Goods and Secret-level clearances.

  WIMS, hand tools, power tools, support equipment

• 29d

  Application Security Analyst, Deloitte Global Technology

  Toronto, ON

  

  Deloitte

  Candidates need a bachelor's degree or equivalent experience, hands-on work with security testing tools, and knowledge of the OWASP Top 10 and CWE Top 25. They also need to read and write a scripting language, understand a full stack development language, work with DevOps tools, and communicate well with global stakeholders.

  Snyk, Fortify, Contrast Security, OWASP ZAP, Postman, Swagger

• 1mo

  Senior Engineer, Application Security

  Calgary, AB

  RemoteFull Time

  

  Lightspeed Commerce, Inc.

  Candidates need hands-on application or product security experience in cloud environments, deep knowledge of OWASP Top 10 flaws, and experience tuning CI/CD scanners. They also need threat modeling skills, fluency in Python, Go, JavaScript or Java, and strong communication skills.

  SAST tools, DAST tools, SCA tools, CI/CD pipelines

• 1mo

  Product Security Specialist II

  Quebec

  $102k–$115k/yrRemoteFull Time

  

  Safe Software

  3+ YOESafe Software needs 3+ years in product or application security, solid knowledge of vulnerability classes and tools like SAST, DAST and SCA, strong Python skills, Agentic AI experience and clear communication with technical and non-technical audiences.

  Python, SAST, DAST, SCA, FME

• 1mo

  Technical Success Manager

  Ottawa, ON

  Full Time

  

  Work in Ottawa: Invest Ottawa is a non-profit, partnership organization that operates on an annual budget that comes from a variety of sources including: municipal,…

  5+ YOECandidates need 5+ years in a customer-facing technical role and experience running programs for many customers at once. Working knowledge of developer tools, application security concepts, and DevSecOps is expected, along with strong communication and organization skills.

  GitHub, Jira, Jenkins, VS Code, Claude, Gemini

• 1mo

  Senior Cybersecurity and Compliance Analyst - Landmark

  Calgary, AB

  

  Halliburton: With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the company helps its customers maximize value throughout…

  5+ YOECandidates need 5+ years in cybersecurity, GRC, IT audit or risk management, plus a bachelor's degree or equivalent experience. They must know security controls, cloud security and at least one compliance framework, and write and explain risk clearly.

  ServiceNow GRC, Archer

  1mo

  Application Security Engineer (senior - principal) Landmark

  Calgary, AB

  

  Halliburton: With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the company helps its customers maximize value throughout…

  3+ YOECandidates need an undergraduate degree in Computer Science or a related field and at least three years in software development, application security, cybersecurity, DevSecOps or cloud security. They also need secure development knowledge, experience fixing software vulnerabilities, and clear communication with engineering teams.

  GitLab, Azure, AWS, Terraform, SAST tools, DAST tools

• 1mo

  Automation and Build Developer II

  Burnaby, BC

  $75k–$107k/yrFull Time

  

  LMI Technologies

  5+ YOECandidates need 5+ years as a build, release or automation developer with a strong CI/CD focus, strong Python and practical C++ skills, and experience with GCC cross-compilation, Linux build systems and Docker build environments. A bachelor's degree or equivalent experience and familiarity with Git and a CI/CD platform are required.

  Bamboo, Bitbucket Pipelines, Docker, Git, GCC, MSVC

• 1mo

  Senior Application Security Analyst

  Mississauga, ON

  

  Purolator: is a leading integrated freight, package and logistics solutions provider.

  5+ YOECandidates need 5+ years in application security or secure software development, hands-on experience with SAST, SCA, DAST and secret scanning tools, and solid knowledge of OWASP Top 10 and threat modeling. Strong English communication and eligibility for a Reliability Security Clearance are required.

  SAST tools, SCA tools, DAST tools, Secret scanning tools, CI/CD pipelines, AWS

• 1mo

  Manager Platform Security

  Richmond Hill, ON

  Full Time

  

  Paymentus: Paymentus® (NYSE: PAY) is the leading provider of real-time, cloud-based billing, payment, and customer engagement solutions.

  8+ YOE3+ MgmtCandidates need a technical degree or equivalent experience, 8+ years in software or security engineering, and 3+ years leading teams. Hands-on skills in Java, NodeJS, Python or Golang, public cloud security, Kubernetes, CI/CD security and API and LLM application security are required.

  Kubernetes, Cloudflare, Fastly, Spring, Tomcat, JBoss

• 1mo

  Inspector - Aerospace components

  Montréal, QC

  $30.73–$53.21/hr

  FA

  FTAI Aviation LLC

  3+ YOECandidates need a DEP, DEC or ASP in inspection, aerospace, machining, welding, sheet metal or structures, plus at least 3 years of aerospace component inspection. They must read technical drawings with GD&T, use high-precision measuring instruments, and know TC, FAA, EASA and AS9100 standards.

  CMM, micrometers, calipers, profilometers, bore gauges

• 1mo

  Senior Security Engineer

  Vancouver, BC

  $130k–$160k/yrOn-siteFull Time

  

  FISPAN

  5+ YOECandidates need 5+ years in security analysis, penetration testing or incident response, with hands-on exploitation skills and the ability to read raw logs. OSCP (or equivalent) is required or in progress, and strong English communication is essential.

  Splunk, Burp Suite, Metasploit, Nmap, Cobalt Strike, Nessus

• 1mo

  Member of Technical Staff - Cloud Operations

  Ontario

  Full Time

  CW

  Canada Wind River

  8+ YOECandidates need 8+ years of cloud, infrastructure or DevOps experience, a relevant degree or equivalent practical experience, and hands-on skill with AWS, Azure or GCP. Strong Linux administration, networking, cloud security and Infrastructure as Code skills are also required.

  Terraform, OpenTofu, Terragrunt, AWS CDK, CloudFormation, GitLab

• 1mo

  Senior Cyber Security Engineer

  Toronto, ON

  HybridFull Time

  

  CAAT Pension Plan: CAAT Pension Plan provides workplaces with lifetime retirement income plans for employees.

  8+ YOECandidates need at least eight years of practical cybersecurity experience in application security, vulnerability management, incident response and cloud security. A computer science degree, a relevant security certification, and knowledge of ISO 27001, NIST, CIS and MITRE ATT&CK are also required.

  Splunk Enterprise Security, Azure Sentinel, CrowdStrike, Rapid7 InsightVM, Tenable, Imperva WAF

• 1mo

  Application Security, Senior Specialist

  Toronto, ON

  Full Time

  

  Interac Corp.: Interac se fait le champion d’une culture organisationnelle et d’une citoyenneté d’entreprise fondées sur les principes de responsabilité, de…

  5+ YOECandidates need 5+ years of application security or software security experience, preferably in FinTech, SaaS or cloud-native settings. They need hands-on skill with security testing tools, DevSecOps practices, at least one programming language, and cloud security knowledge.

  SAST, SCA, DAST, CI/CD pipelines, container security platforms

• 1mo

  Technical Manager – Product Security, Vulnerability Management & Software Assurance

  Ottawa, ON

  Full Time

  LO

  Lumentum Ottawa ULC

  Candidates need a bachelor's degree in computer science, engineering, cybersecurity or a related field, plus experience leading product or application security or cloud security teams. They should know CVE, CVSS, CWE, SBOM, VEX and software supply-chain security, and have worked with SCA tools such as Black Duck.

  Black Duck, CodeQL, Coverity, GCP, Cloud Run, Cloud KMS

• 1mo

  Software Governance Specialist

  Ottawa, ON

  $69k–$111k/yrFull Time

  CC

  Ciena Canada ULC

  5+ YOECandidates need at least five years of open source licensing experience and an understanding of commercial licensing models. They also need experience in software development environments, awareness of AI governance, and strong analytical and communication skills.

  SBOM tools, software composition analysis tools

• 1mo

  Staff Product Security Engineer

  Ontario

  RemoteFull Time

  

  DataRobot, Inc.

  8+ YOECandidates need 8+ years in information security, mostly in product security or AppSec, plus deep knowledge of FedRAMP, NIST 800-53 and the DoD Cloud SRG. They must write Python or Go, understand Linux containers well, and have hands-on experience with Semgrep, Trivy and Burp Suite. A bachelor's or master's degree in a related field, or equivalent experience, is required.

  Semgrep, Trivy, Burp Suite, Kubernetes, Python, Go

• 1mo

  Staff Security Engineer

  Remote in Canada

  RemoteFull Time

  

  Redpanda Data

  7+ YOECandidates need 7+ years in application or product security and the ability to review systems code, ideally C++ or Rust. They should have experience leading threat modeling, running AppSec tools and securing the software supply chain.

  SAST tools, SCA tools, secret scanning tools, DAST tools, libFuzzer, AFL++

• 1mo

  Senior DevOps Engineer - Cloud Operations

  Calgary, AB

  

  Black Duck Software, Inc.

  Candidates need hands-on Google Cloud experience and deep Kubernetes skills. They also need cloud networking and security knowledge, CI/CD and scripting skills, and a bachelor's degree or equivalent experience.

  Google Cloud Platform, Kubernetes, Terraform, Helm, ArgoCD, GitHub Actions

  1mo

  Lead Product Security

  Remote in Canada

  Remote

  

  Black Duck Software, Inc.

  8+ YOECandidates need 8+ years in product or application security, hands-on design review and threat modeling skills, and experience building a security champions or enablement program. A bachelor's degree or equivalent practical experience is required.

  Black Duck SCA, Coverity, GitGuardian, Jira

• 1mo

  Senior Identity Engineer

  Vancouver, BC

  

  Later

  5+ YOECandidates need 5-7+ years as a security or software engineer with a strong security focus, plus hands-on experience with identity and access management and production-grade systems. Experience with application and cloud security, secure CI/CD, and compliance frameworks such as SOC 2 and ISO 27001 is also required.

  AWS Security Hub, Azure Security Center, GCP Security Command Center, Terraform, CloudFormation, SIEM

• 1mo

  Senior Application Security Engineer II

  Toronto, ON

  $180k–$220k/yrHybridFull Time

  

  Relay: Relay is a financial technology company and is not an FDIC-insured bank.

  5+ YOECandidates need 5 to 6 years of application security or penetration testing experience, production software shipping experience, deep knowledge of OWASP Top 10, and daily use of AI tools for development. Strong communication and developer mentorship skills are also expected.

  Datadog, Burp Suite, Claude Code, Cursor, TypeScript, Node.js

21 companies